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DETAILED ACTION 

Claims 1-22 are currently presented and have been examined. 
Response to Arguments 
Applicant's arguments filed 21 October 2008 have been fully considered but they 
are not persuasive. 

The Applicant argues that the combined teachings of "WRT51 AB", "EAP" and 
"CHAP" do not teach or reasonably suggest configuring the access point with new 
administration information in response to comparing that the second and third 
parameters match. The Examiner does not agree. The Applicant falls to fully consider 
the embodiment as relied upon by the Examiner and only argues about elements and 
steps that do not relate to the invention as claimed. Once the access point is configured 
as described, the steps of the claimed invention occur in the embodiment shown bv the 
Examiner. The Applicant is arguing intermediate steps that, while they may be required 
for the embodiment to occur, are unrelated to the actual operation of the embodiment 
when the embodiment is preconfiqured by these intermediate steps. Therefore, these 
arguments are unpersuasive. 

The Applicant also argues that the limitation described in claim 6 is not 
nonfunctional descriptive material. The Examiner also disagrees with this argument. 
The claim's broadest reasonable interpretation merely allows for a nominal 
"corresponding" relationship between the string parameter and the new administration 
information. This relationship may be interpreted as being of any sort, including ones 
that do not functionally interrelate to the claimed invention. Therefore, this 
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"correspondence" may be broadly considered to be nonfunctional descriptive language 
in its broadest sense. 

The Applicant has failed to address the Examiner's assertion of Official Notice 
that including an ActiveX control with a web page was well known in the art. MPEP 
2144.03 states that a general allegation that the claims define a patentable invention 
without any reference to the Examiner's assertion of Official Notice would be inadequate 
and, if the Applicant does not traverse the examiner's assertion of official notice, the 
Examiner should clearly indicate in the next Office action that the common knowledge 
or well-known in the art statement is taken to be admitted prior art because the 
Applicant failed to traverse the Examiner's assertion of official notice. Therefore, the 
subject matter that is the subject of the Examiner's Official Notice is now considered to 
be admitted prior art. 

Therefore, the rejections are maintained and the claims are not in condition for 
allowance. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 
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1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

Claims 1-4, 7-9, 12-15, and 18-22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over "WRT51 AB Dual-Band Wireless A+B Broadband Router User Guide" 
("WRT51 AB") in view of "Extensible Authentication Protocol (EAP)" ("EAP") and in 
further view of "Request for Comments (RFC) 1994: PPP Challenge Handshake 
Authentication Protocol (CHAP)" 

Regarding claim 1, "WRT51AB" disclosed a method for exchanging 
administration management information with a client terminal in a wireless network, 
comprising the steps of: 

receiving by an access point (referred to throughout the reference as a "router") a 
request for an administration management file ("web page") from the client terminal; 
transmitting by the access point the administration management file to the client 
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terminal; (see at least Chapter 6 "The Router's Web-based Utility", specifically 
subsection "How to Access the Web-based Utility"; see also various Figures within 
Chapter 6 which show administration management files displayed on a screen of the 
client terminal) 

"WRT51AB" did not expressly disclose generating by the access point and 
transmitting by the access point to the client terminal a first parameter; receiving by the 
access point new administration information and a second parameter from the client 
terminal; generating by the access point a third parameter using a predetermined 
algorithm and the first parameter; comparing by the access point the third parameter to 
the second parameter; and configuring the access point with the new administration 
information in response to the comparison only if the third parameter and the second 
parameter match, however, "WRT51AB" did expressly disclose wherein the access 
point and the client terminal use a method for establishing a connection to one another 
for the purpose of allowing the client terminal to securely send new administration 
information to the access point for implementation of the administration information 
within the access point, (see at least Chapter 6 "The Router's Web-based Utility", 
specifically subsection "How to Access the Web-based Utility" for various 
implementations of administration information; see also various Figures within Chapter 
6 which show administration management files displayed on a screen of the client 
terminal) (see at least Appendix C "Configuring Wireless Security", specifically 
subsection "MD5 Authentication for Windows XP", more specifically the sentence "In the 
drop down box next to EAP type, select MD5-Challenge") 
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"EAP" disclosed the use of the method for establishing a connection in the same 
context as disclosed in "WRT51AB" (see at least page 27, section 5.4 "MD5- 
Challenge"). "EAP" also disclosed that the use of such a method is intended for use in 
wireless networks (see page 28, specifically "User over the Internet or with wireless 
media") and that that the method is similar to the use of another protocol (see page 27, 
specifically "The MD5-Challenge Type is analogous to the PPP CHAP protocol 
[RFC1994]..." 

"CHAP" disclosed the protocol as described in "EAP" wherein an authenticator 
generates and transmits a first parameter (a "challenge value" that is "unique" included 
within a 'challenge' message) to a peer, the peer sends a second parameter ("value 
calculated using a 'one-way hash' function") to the authenticator, the authenticator 
compares the second parameter with a third parameter ("[the authenticator's] own 
calculation of the expected hash value") and accepts the connection as authentic when 
the second and third parameters are determined to be the same ("match") (see at least 
page 2, section 2 "Challenge-Handshake Authentication Protocol" and page 4, section 
2.3 "Design Requirements"). "CHAP" also disclosed that this protocol may be 
implemented upon connection establishment between the authenticator and the peer 
and at any time after the connection has been established (see at least page 2, 
specifically "This is done upon initial link establishment, and MAY be repeated anytime 
after the link has been established.") 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of these references since one of ordinary 
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skill would have clearly recognized that each of the references refer to each other by 
reference and would have been highly motivated to combine the teachings of the 
references. The combined teachings of the references disclose a method that allow a 
client terminal and an access point as described in "WRT51AB" to connect to each 
other securely using the authentication method as nominally described in "WRT51AB" 
and "EAP" and as expressly described in "CHAP" and to allow the access point to 
execute the authentication method at any time including while the client terminal is 
requesting an administrative file and providing new administration information to the 
access point as described in "WRT51 AB". Therefore, it would have been obvious to one 
of ordinary skill to achieve the limitations as claimed. 

Claim 8 is also rejected since claim 8 recites substantially the same limitations as 
recited in claim 1 . 

Regarding claim 2, "WRT51AB", "EAP" and "CHAP" disclosed the method 
according to claim 1. 

"WRT51AB" disclosed wherein the wireless network is a wireless local area 
network in accordance with IEEE 802.1 1 standards, the client terminal is a mobile 
terminal within a coverage area of the wireless local area network, and the 
administration management file comprises an administration web page, (see at least 
Chapter 1 "Introduction" and Chapter 6 "The Router's Web-based Utility") 

Claim 9 is also rejected since claim 9 recites substantially the same limitations as 
recited in claim 2. 
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Regarding claim 3, "WRT51AB", "EAP" and "CHAP" disclosed the method 
according to claim 2. 

"WRT51AB" and "EAP" did not expressly disclose, however, "CHAP" did disclose 
wherein the first parameter is a random number (a "challenge value" that is "unique"), 
(page 4, section 2.3 "Design Requirements") 

Claim 3 Is rejected since the motivations regarding the obviousness of claim 1 
also apply to claim 3. 

Regarding claim 4, "WRT51AB", "EAP" and "CHAP" disclosed the method 
according to claim 3. 

"WRT51AB" and "EAP" did not expressly disclose, however, "CHAP" did disclose 
wherein the step of generating a third parameter comprises generating the third 
parameter using a hash function and the first parameter, (see "[the authenticator's] own 
calculation of the expected hash value" using the "challenge value"; page 2, section 2 
"Challenge-Handshake Authentication Protocol" and page 4, section 2.3 "Design 
Requirements") 

Claim 4 is rejected since the motivations regarding the obviousness of claim 1 
also apply to claim 4. 

Regarding claim 7, "WRT51AB", "EAP", and "CHAP" disclosed the method 
according to claim 2. 

"WRT51AB", "EAP", and "CHAP" did not expressly disclose wherein the 
transmitting step comprises transmitting the administration web page and Active X 
control to the client terminal. 
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Examiner tal<es Official Notice (see MPEP § 2144.03) that including an ActiveX 
control with a web page was well known in the art at the time the invention was made. 
The Applicant is entitled to traverse any/all official notice taken in this action according 
to MPEP § 2144.03, namely, "if applicant traverses such an assertion, the examiner 
should cite a reference in support of his or her position". However, MPEP § 2144.03 
further states "See also In re Boon, 439 F.2d 724, 169 USPQ 231 (CCPA 1971) (a 
challenge to the taking of judicial notice must contain adequate information or argument 
to create on its face a reasonable doubt regarding the circumstances justifying the 
judicial notice)." Specifically, In re Boon, 169 USPQ 231 , 234 states "as we held in 
Ahlert, an applicant must be given the opportunity to challenge either the correctness of 
the fact asserted or the notoriety or repute of the reference cited in support of the 
assertion. We did not mean to imply by this statement that a bald challenge, with 
nothing more, would be all that was needed". Further note that 37 CFR § 1 .671(c)(3) 
states "Judicial notice means official notice". Thus, a traversal by the Applicant that is 
merely "a bald challenge, with nothing more" will be given very little weight. 

Therefore, one of ordinary skill in the art would have been motivated to modify 
the teachings of "WRT51AB", "EAP", and "CHAP" to include the well known subject 
matter in the art to achieve the claimed invention since the well known subject matter 
was well within the level of knowledge and skill of one or ordinary skill and would have 
reasonably suggested, given this knowledge, that, in view of the teachings of 
"WRT51AB", "EAP", and "CHAP", it would been obvious to achieve the limitations of the 
claim. 
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Regarding claim 12, "WRT51AB" disclosed a method for exchanging 
administration management information with an access point in a wireless network 
using a client terminal, comprising the steps of: 

transmitting a request for an administration management file to the access point; 
receiving the administration management file from the access point; and generating new 
administration information in response to user input and transmitting the new 
administration information to the access point, (see at least Chapter 6 "The Router's 
Web-based Utility", specifically subsection "How to Access the Web-based Utility"; see 
also various Figures within Chapter 6 which show administration management files 
displayed on a screen of the client terminal) 

"WRT51 AB" did not expressly disclose receiving a first parameter from the 
access point; generating a second parameter using a predetermined algorithm and the 
first parameter; transmitting the second parameter to the access point; generating by 
the access point a third parameter using a predetermined algorithm and the first 
parameter; comparing by the access point the third parameter to the second parameter; 
and configuring the access point with the new administration information in response to 
the comparison only if the third parameter and the second parameter match, however, 
"WRT51 AB" did expressly disclose wherein the access point and the client terminal use 
a method for establishing a connection to one another for the purpose of allowing the 
client terminal to securely send new administration information to the access point for 
implementation of the administration information within the access point, (see at least 
Chapter 6 "The Router's Web-based Utility", specifically subsection "How to Access the 
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Web-based Utility" for various implementations of administration information; see also 
various Figures within Chapter 6 which show administration management files displayed 
on a screen of the client terminal) (see at least Appendix C "Configuring Wireless 
Security", specifically subsection "MD5 Authentication for Windows XP", more 
specifically the sentence "In the drop down box next to EAP type, select MD5- 
Challenge") 

"EAP" disclosed the use of the method for establishing a connection in the same 
context as disclosed in "WRT51AB" (see at least page 27, section 5.4 "MD5- 
Challenge"). "EAP" also disclosed that the use of such a method is intended for use in 
wireless networks (see page 28, specifically "User over the Internet or with wireless 
media") and that that the method is similar to the use of another protocol (see page 27, 
specifically "The MD5-Challenge Type is analogous to the PPP CHAP protocol 
[RFC1994]..." 

"CHAP" disclosed the protocol as described in "EAP" wherein a peer receives a 
first parameter (a "challenge value" that is "unique") from an authenticator; the peer 
generates a second parameter ("value calculated" using a hash function) using a 
predetermined algorithm ("hash function") and the first parameter and the peer transmits 
the second parameter to the access point (see at least page 2, section 2 "Challenge- 
Handshake Authentication Protocol" and page 4, section 2.3 "Design Requirements"). 
"CHAP" also disclosed that this protocol may be implemented upon connection 
establishment between the authenticator and the peer and at any time after the 
connection has been established (see at least page 2, specifically "This is done upon 
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initial link establishment, and MAY be repeated anytime after the link has been 
established.") 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine the teachings of these references since one of ordinary 
skill would have clearly recognized that each of the references refer to each other by 
reference and would have been highly motivated to combine the teachings of the 
references. The combined teachings of the references disclose a method that allow a 
client terminal and an access point as described in "WRT51AB" to connect to each 
other securely using the authentication method as nominally described in "WRT51AB" 
and "EAP" and as expressly described in "CHAP" and to allow the access point to 
execute the authentication method at any time including while the client terminal is 
requesting an administrative file and providing new administration information to the 
access point as described in "WRT51AB". Therefore, it would have been obvious to one 
of ordinary skill to achieve the limitations as claimed. 

Claims 13 and 14 are rejected since claims 13 and 14 recite substantially the 
same limitations as recited in claim 2 and 7 respectively. 

Regarding claim 15, "WRT51AB", "EAP", and "CHAP" disclosed the method 
according to claim 13. 

"WRT51AB" and "EAP" did not expressly disclose, however, "CHAP" did disclose 
wherein the step of generating a second parameter comprises generating the second 
parameter using a hash function and the first parameter, (see "value calculated using a 
'one-way hash' function" which uses the "challenge value"; page 2, section 2 
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"Challenge-Handshake Authentication Protocol" and page 4, section 2.3 "Design 
Requirements") 

Claim 15 is rejected since the motivations regarding the obviousness of claim 12 
also apply to claim 15. 

Claims 18-20 are also rejected since these claims recite substantially the same 
limitations as recited in claims 12, 13, and 15 respectively. 

Claims 5-6, 1 0-1 1 , and 1 6-1 7 are rejected under 35 U .S.C. 1 03(a) as being 
unpatentable over "WRT51 AB", "EAP" and "CHAP" as applied to claims 3 and above, 
and further in view of "Request for Comments (RFC) 1321 : The MD5 Message-Digest 
Algorithm" ("MD5"). 

Regarding claim 5, "WRT51AB", "EAP" and "CHAP" disclosed the method 
according to claim 3. 

"WRT51 AB", "EAP" and "CHAP" did not expressly disclose wherein the step of 
generating a third parameter comprises generating a third parameter using a hash 
function, the first parameter, a password, and a string parameter, however, "CHAP" 
disclosed generating a third parameter by using a hash function and a first parameter as 
described above and that the protocol described in the reference uses a specific hash 
function ("MD5"). 

"MD5" expressly disclosed that the hash function is able to generate a parameter 
using an arbitrary number of parameters of any type (see at least page 1 , specifically 
"This document describes the MD5 message-digest algorithm. The algorithm takes as 
input a message of arbitrary length...") 
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It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to generating a third parameter using a hash function, the first 
parameter, a password, and a string parameter since the disclosures of "MD5" in view 
of the other references clearly suggest to one of ordinary skill in the art that a parameter 
could be generated using a hash function and any number of parameters. Therefore, 
the disclosures of the reference would have suggested to one of ordinary skill in the art 
to use any of a selection of well known parameters including a string and password in 
addition to the parameters described in the combined teachings of "WRT51AB", "EAP" 
and "CHAP" and expected the generation of a third parameter in the manner claimed to 
be successful. 

Claim 10 is also rejected since claim 10 recites substantially the same limitations 
as recited in claims 3 and 5 in combination. 

Regarding claim 6, "WRT51AB", "EAP", "CHAP", and "MD5" disclosed the 
method according to claim 5. 

"WRT51AB", "EAP", "CHAP", and "MD5" did not expressly disclose wherein the 
string parameter corresponds to the new administration information. 

However, these differences are only found in the nonfunctional descriptive 
material and are not functionally involved in the steps recited. Thus, this descriptive 
material will not distinguish the claimed invention from the prior art in terms of 
patentability. See In re Gulack, 703 F.2d 1381, 1385, 217 USPQ 401, 404 (Fed. Cir. 
1983); In re Lowry, 32 F.3d 1579, 32 USPQ2d 1031 (Fed. Cir. 1994). 



Application/Control Number: 10/549,466 Page 15 

Art Unit: 2443 

Therefore, it would have been obvious to a person of ordinary skill in the art at the 
time the invention was made to include the nonfunctional descriptive material with 
the claimed invention because such data does not functionally relate to the steps in 
the method claimed and because the subjective interpretation of the descriptive 
material does not patentably distinguish the claimed invention. 

Claim 1 1 is also rejected since claim 1 1 recite substantially the same limitations 
as recited in claim 6. 

Regarding claim 16, "WRT51AB", "EAP", and "CHAP" disclosed the method 
according to claim 13. 

"WRT51AB", "EAP", and "CHAP" disclosed wherein the step of generating a 
second parameter comprises generating the second parameter using a hash function, 
the first parameter, a password and a string parameter, however, "CHAP" disclosed 
generating a second parameter by using a hash function and a first parameter as 
described above and that the protocol described in the reference uses a specific hash 
function ("MD5"). 

"MD5" expressly disclosed that the hash function is able to generate a parameter 
using an arbitrary number of parameters of any type (see at least page 1 , specifically 
"This document describes the MD5 message-digest algorithm. The algorithm takes as 
input a message of arbitrary length...") 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to generating a second parameter using a hash function, the first 
parameter, a password, and a string parameter since the disclosures of "MD5" in view 
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of the other references clearly suggest to one of ordinary skill in the art that a parameter 
could be generated using a hash function and any number of parameters. Therefore, 
the disclosures of the reference would have suggested to one of ordinary skill in the art 
to use any of a selection of well known parameters including a string and password in 
addition to the parameters described in the combined teachings of "WRT51 AB", "EAP" 
and "CHAP" and expected the generation of a second parameter in the manner claimed 
to be successful. 

Regarding claim 17, "WRT51AB", "EAP", "CHAP" and "MD5" disclosed the 
method according to claim 16. 

"WRT51 AB", "EAP", "CHAP" and "MD5" did not expressly disclose wherein the 
string parameter is generated from the new administration information. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to generate a string parameter from a value such as the new 
administration information since "WRT51AB" expressly disclosed that new 
administration information is generated from user input and it would have suggested to 
one of ordinary skill in the art that the new administrative information could have been 
expressed as a string parameter based on the disclosures of "WRT51 AB" regarding 
web pages which are known to be expressed as a file expressed as a string format well 
known as HTML. Therefore, it would have been obvious to achieve the limitations as 
recited in the claim. 

Claims 21 and 22 are also rejected since these claims recite substantially the 
same limitations as recited in claims 16 and 17 in combination. 
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Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of tine extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to George C. Neurauter, Jr. whose telephone number is 
(571 )272-3918. The examiner can normally be reached on the hours between 8:30am- 
5:00pm Eastern. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

supervisor, Tonia Dollinger, can be reached on 571-272-4170. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/George C. Neurauter, Jr./ 
Primary Examiner, Art Unit 2443 



